Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa
File:                     53708f7a-5ec1-3574-bae8-071d2541a0f4.roa (raw, json)
Hash identifier:          q8DnEAwojQWTSYlDTCqiJ/QVKdX3mElP+9E6Zte+hro=
Subject key identifier:   EE:D4:C2:B3:D6:23:D7:71:F2:F5:78:94:7D:4F:E5:ED:EF:38:C1:E9
Certificate issuer:       /CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc
Certificate serial:       010D0C9F4328584BB2F7B28429590832B3BB6348
Authority key identifier: 6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa
Signing time:             Fri 31 Oct 2025 01:00:30 +0000
ROA not before:           Fri 31 Oct 2025 01:00:30 +0000
ROA not after:            Thu 29 Jan 2026 02:00:30 +0000
asID:                     10340
IP address blocks:        208.77.184.0/22 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Thu 06 Nov 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4b:b2:f7:b2:84:29:59:08:32:b3:bb:63:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=503b7ff7-eb05-4b50-bb5b-d7fc378b78dc
        Validity
            Not Before: Oct 31 01:00:30 2025 GMT
            Not After : Jan 29 02:00:30 2026 GMT
        Subject: CN=d68566d8-d964-4d13-84ae-f7b450b1b10f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:aa:bb:3b:b7:8d:c1:12:20:82:15:07:c1:22:
                    44:11:4c:ca:81:ea:da:75:35:fe:6e:cb:a4:02:96:
                    04:97:42:08:06:ef:ad:98:a2:d2:93:b2:8e:5b:c9:
                    2e:56:24:f9:40:8f:63:26:92:fd:3e:04:e4:86:e1:
                    4b:f5:d9:21:a8:61:4c:7e:03:b5:1b:e4:6b:e6:0e:
                    c2:28:d4:2d:29:d8:ae:89:82:31:e8:8c:6f:6f:d7:
                    aa:50:64:5c:b5:01:d9:80:64:cb:a6:93:f5:80:cf:
                    0c:31:15:1f:3e:16:f1:1a:93:54:1f:ce:27:9f:b5:
                    02:b6:00:43:f7:61:7f:17:f9:e8:d3:4e:c4:e4:99:
                    4b:ef:56:78:a1:24:4c:9a:bf:18:c2:21:a6:91:b8:
                    3d:80:5a:32:99:34:83:a0:a9:02:74:f6:21:2a:f5:
                    0f:43:cb:f1:02:af:1b:23:b8:0d:d7:ac:ed:4d:fc:
                    77:ba:78:86:8f:2b:32:17:0c:1d:e1:ca:65:d8:34:
                    78:63:fa:bc:2d:b9:9f:99:28:c0:91:be:cf:02:ab:
                    f2:8b:ff:99:90:2e:8f:c4:29:f3:85:a2:32:fd:4f:
                    51:a3:0e:e8:4e:1f:a7:2f:b4:69:41:07:5e:72:be:
                    5d:0e:99:30:e6:5d:52:28:8f:f5:79:e8:9a:5e:e6:
                    27:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:D4:C2:B3:D6:23:D7:71:F2:F5:78:94:7D:4F:E5:ED:EF:38:C1:E9
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/53708f7a-5ec1-3574-bae8-071d2541a0f4.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.crl

            X509v3 Authority Key Identifier:
                keyid:6C:DC:B8:20:C4:DC:47:8C:45:45:46:30:E4:F9:45:1D:20:59:04:6C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/d9d1572f-6cbb-4cf7-b599-e9d0e981d9bf/503b7ff7-eb05-4b50-bb5b-d7fc378b78dc.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  208.77.184.0/22

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         af:4a:e6:9f:e5:c8:8b:1e:3e:4a:29:a9:f2:5d:73:6f:38:08:
         ae:8a:44:76:9a:a3:66:95:fb:13:66:ff:d2:39:a8:d5:e1:b1:
         d6:d5:ab:5a:a7:a2:fb:6e:17:71:01:bc:03:39:34:84:5e:f8:
         be:a8:85:36:bf:7a:b8:eb:04:15:04:b5:80:69:8e:6b:3d:1e:
         71:11:04:8e:f3:00:6c:ec:d0:91:1f:16:4c:83:9b:86:b4:70:
         d8:d8:44:80:5d:dd:c2:72:0a:60:61:a3:b5:84:8f:72:51:e7:
         5c:15:67:b2:fc:ca:29:86:25:ea:fd:9a:75:05:43:c6:f0:f2:
         7e:b4:13:53:48:f2:61:61:27:8d:d5:49:e3:ef:a7:0b:4b:23:
         ef:57:9c:c2:5c:0a:54:e6:e6:6d:38:df:4f:76:03:58:9a:dd:
         51:23:b2:73:f7:75:f1:f2:3f:79:21:e2:3e:25:8e:50:08:5c:
         8f:12:ff:03:4e:9d:95:47:2d:78:40:76:9b:ad:86:e8:2e:1e:
         56:2c:91:a4:e5:20:e3:57:2f:21:fc:1e:42:dd:d3:53:65:87:
         90:00:0a:84:01:ce:70:8d:86:49:6e:cf:c1:1d:25:79:34:c3:
         91:d3:e8:4c:23:5c:f6:3e:48:52:eb:a2:a3:03:38:ef:4b:b1:
         70:15:1b:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 5 09:09:24 2025 by rpki-client